Victims of online scams in the Philippines should act fast: report the fraud, notify the bank or e-wallet provider, preserve evidence, and request an urgent hold or freezing of the receiving account. Speed matters because scam funds are often moved within minutes through multiple accounts, e-wallets, crypto wallets, or “mule” accounts. This guide explains where to report an online scam, how account freezing works, what documents to prepare, and what Philippine laws may apply.
What Counts as an Online Scam in the Philippines?
An online scam is any fraud carried out through the internet, mobile apps, social media, messaging platforms, email, online marketplaces, banking apps, or e-wallets.
Common examples include:
- Fake online sellers
- GCash, Maya, or bank transfer scams
- Phishing links and fake bank pages
- Investment scams
- Romance scams
- Job recruitment scams
- Crypto or trading scams
- Fake parcel, customs, or delivery fee scams
- Account takeover using OTPs
- “Tasking” scams on Telegram, WhatsApp, or Facebook
- Impersonation of banks, government offices, lawyers, police, or relatives
In many cases, the legal issue is not only “online scam.” It may also involve estafa, cybercrime, identity theft, unauthorized access, money mule activity, or violations of banking and financial consumer protection rules.
Main Philippine Laws That Apply to Online Scams
Revised Penal Code: Estafa or Swindling
Most online scams fall under estafa under Article 315 of the Revised Penal Code. Estafa generally involves:
- Fraud or deceit;
- Damage or prejudice to the victim; and
- A link between the scammer’s false representation and the victim’s payment.
For example, a person who pretends to sell a phone online, receives payment, and never delivers the item may be liable for estafa.
Penalties were updated by Republic Act No. 10951 (2017), which adjusted the amounts used in computing penalties for crimes involving property.
Cybercrime Prevention Act: RA 10175
The Cybercrime Prevention Act of 2012, or Republic Act No. 10175, applies when fraud is committed through a computer system, internet platform, mobile app, or electronic communication.
Important cybercrime concepts include:
- Computer-related fraud
- Computer-related identity theft
- Illegal access
- Misuse of devices
- Aiding or abetting cybercrime
You can read the law through RA 10175 on Lawphil.
Anti-Financial Account Scamming Act: RA 12010
The Anti-Financial Account Scamming Act, or Republic Act No. 12010, is especially important for online scams involving bank accounts, e-wallets, and other financial accounts.
RA 12010 targets activities such as:
- Opening or using financial accounts for scam purposes;
- Selling, renting, or lending bank or e-wallet accounts;
- Using mule accounts to receive scam proceeds;
- Social engineering schemes;
- Economic sabotage involving large-scale financial account scamming.
The law also supports stronger cooperation among banks, e-wallets, regulators, and law enforcement. You can read the official text through the Supreme Court E-Library copy of RA 12010.
E-Commerce Act: RA 8792
The Electronic Commerce Act of 2000, or Republic Act No. 8792, recognizes electronic documents and electronic data messages. This matters because screenshots, emails, chat logs, transaction receipts, and online confirmations may become evidence if properly preserved and authenticated.
What to Do Immediately After an Online Scam
1. Contact Your Bank or E-Wallet Provider Immediately
Do this first, even before going to the police.
Call the official fraud hotline or use the in-app help center of your bank or e-wallet. Tell them clearly:
“I am reporting a fraudulent transaction. Please temporarily hold, freeze, or flag the receiving account and preserve all transaction records.”
Provide:
- Your full name;
- Account or mobile number used;
- Date and time of transfer;
- Amount;
- Reference number;
- Name and account number or wallet number of the recipient;
- Screenshots of the scam conversation;
- Proof that the transaction was unauthorized or fraud-induced.
Ask for a case number, ticket number, or reference number. Save it.
2. Request an Account Hold or Freezing of the Receiving Account
Ordinary victims usually cannot directly “freeze” another person’s account by themselves. What you can do is file an urgent fraud report and request the financial institution to:
- Temporarily hold funds if still available;
- Flag the account for fraud review;
- Coordinate with the receiving bank or e-wallet;
- Preserve account and transaction records;
- Escalate the matter to its fraud, legal, or compliance team.
Under RA 12010 and BSP regulations, financial institutions are expected to maintain fraud management systems and cooperate in addressing disputed or fraudulent transactions.
3. Preserve Evidence Before the Scammer Deletes It
Do not rely only on memory. Save everything immediately.
Collect:
- Screenshots of chats;
- Profile links and usernames;
- Phone numbers;
- Email addresses;
- Bank or e-wallet details;
- Transaction receipts;
- Reference numbers;
- Product listings or ads;
- Tracking numbers;
- URLs of fake websites;
- Call logs;
- Voice messages;
- Email headers, if available.
Do not edit screenshots. Keep original files when possible.
4. Report to Law Enforcement
You may report to:
| Office | When to Use | Notes |
|---|---|---|
| PNP Anti-Cybercrime Group (PNP-ACG) | Online scams, phishing, social media scams, hacking, cyber fraud | Use the nearest cybercrime office or official reporting channels |
| NBI Cybercrime Division | Serious or complex scams, identity theft, large losses, syndicates | Often requires personal appearance and evidence |
| Local Police Station | Immediate blotter, local suspect, supporting record | Helpful but may refer you to cybercrime units |
| DOJ Office of Cybercrime | Cybercrime coordination and legal processes | Created under RA 10175 |
| BSP Consumer Assistance Mechanism | Complaints against banks, e-wallets, or financial institutions | Usually requires prior complaint with the financial institution |
For cybercrime reporting, use official government channels such as the PNP Anti-Cybercrime Group and the DOJ Office of Cybercrime.
Step-by-Step Guide to Reporting an Online Scam
Step 1: Make an Incident Timeline
Write a short chronological summary:
- When you first interacted with the scammer;
- What the scammer promised;
- What convinced you to send money or information;
- When and how you paid;
- What happened after payment;
- How you discovered it was a scam.
Keep it factual. Avoid guessing. Investigators need clear dates, names, numbers, links, and amounts.
Step 2: Report to the Sending Bank or E-Wallet
Use official channels only. Do not use hotline numbers found in random Facebook comments or messages.
Ask for:
- Fraud ticket number;
- Confirmation that the transaction was reported;
- Request for coordination with the receiving institution;
- Instructions for submitting documents;
- Expected timeline for review.
Many financial institutions require the complaint to be filed quickly. Some have short internal deadlines for disputed transactions, especially for unauthorized transfers.
Step 3: Report to the Receiving Bank or E-Wallet, If Known
If you know the receiving institution, contact it too.
Say:
“I transferred funds to an account used in a scam. I am requesting that the receiving account be urgently flagged, the funds preserved if still available, and the matter escalated to fraud/compliance.”
They may not disclose account details due to bank secrecy and data privacy laws, but they can receive the report and act internally.
Step 4: File a Complaint with PNP-ACG or NBI Cybercrime
Prepare both printed and digital copies of your evidence.
Common requirements include:
- Valid government ID;
- Signed complaint-affidavit or sworn statement;
- Screenshots and printed copies of chats;
- Proof of payment;
- Bank or e-wallet receipts;
- Scam links, usernames, numbers, and account details;
- Your incident timeline;
- Bank or e-wallet case reference numbers.
A complaint-affidavit is a sworn written statement explaining what happened. It is usually notarized.
Step 5: Ask About Preservation and Coordination Requests
For online scams, the most useful early action is preserving records before they disappear.
Ask investigators whether they can issue or request:
- Preservation of computer data;
- Account information from platforms;
- Transaction records;
- Coordination with banks or e-wallets;
- Referral for inquest or preliminary investigation, if a suspect is identified.
Under RA 10175, preservation of computer data is important because cyber evidence can be deleted, changed, or become inaccessible.
Step 6: Escalate to BSP if the Financial Institution Does Not Act Properly
If your complaint involves a bank, e-wallet, remittance company, or other BSP-supervised financial institution, you may escalate to the BSP after first filing with the institution’s consumer assistance channel.
Use the BSP Consumer Assistance Mechanism.
BSP generally does not prosecute scammers for you, but it can require supervised financial institutions to respond to consumer complaints and comply with financial consumer protection rules.
Account Freezing: What Victims Should Realistically Expect
Account freezing is not always instant, and it is not guaranteed.
In practice, there are three different things people often call “freezing”:
| Action | Who Can Do It | Practical Effect |
|---|---|---|
| Fraud hold or temporary restriction | Bank or e-wallet | May stop movement of funds if still inside the account |
| Internal account flagging | Bank, e-wallet, compliance team | Account is reviewed for suspicious activity |
| Formal freeze order or legal restraint | Court, AMLC, or authorized legal process depending on the case | Stronger legal restriction on account movement |
For ordinary online scam victims, the fastest route is usually an urgent fraud report to the bank or e-wallet, followed by a police or NBI complaint.
Documents You Should Prepare
| Document | Why It Matters |
|---|---|
| Valid ID | Confirms your identity as complainant |
| Proof of payment | Shows the amount, date, recipient, and reference number |
| Screenshots of conversations | Shows deceit, promises, threats, or instructions |
| Scam profile links or URLs | Helps trace the online identity |
| Phone numbers and emails | Useful for subpoenas, tracing, and platform reports |
| Bank/e-wallet complaint reference | Shows you reported promptly |
| Complaint-affidavit | Required for many criminal complaints |
| Notarized statement | Gives formal evidentiary weight to your complaint |
| Special Power of Attorney | Needed if someone files for you, especially if you are abroad |
If You Are Outside the Philippines
Filipinos abroad and foreigners can still report scams involving Philippine accounts or Philippine-based scammers.
Practical steps:
- Report immediately to the bank or e-wallet through official online channels.
- Prepare a sworn statement.
- Ask a trusted representative in the Philippines to file with PNP-ACG or NBI, if personal appearance is difficult.
- Execute a Special Power of Attorney (SPA) if someone will act for you.
- If the SPA or affidavit is signed abroad, it may need notarization, consular acknowledgment, or apostille depending on where it is executed and where it will be used.
Foreigners should also keep copies of passports, immigration records, payment receipts, and communications showing why the transaction involved the Philippines.
Common Mistakes That Hurt Online Scam Complaints
Waiting Too Long Before Reporting
Scam funds move quickly. Report within minutes or hours if possible. Waiting days gives the scammer time to withdraw, transfer, or convert the funds.
Deleting Chats Out of Anger or Shame
Do not delete conversations. Even embarrassing messages may become important evidence.
Only Posting on Facebook
Public posts can warn others, but they do not replace a formal complaint. Worse, careless accusations may expose you to defamation issues if you identify the wrong person.
Sending More Money to “Recover” the First Payment
Many victims are scammed twice. A “recovery agent,” “insider,” “law enforcement contact,” or “hacker” who asks for a fee to retrieve funds is often another scammer.
Sharing OTPs or Passwords During the Complaint Process
Real banks, BSP, PNP, NBI, and courts will not ask for your OTP, PIN, or password.
Assuming the Named Account Holder Is Always the Main Scammer
Many scam accounts are mule accounts. The registered account holder may be involved, negligent, paid to lend the account, or a victim of identity misuse. Investigators still need to trace the person who controlled the account.
Can You Recover the Money?
Recovery depends on timing and available funds.
You have a better chance if:
- You reported immediately;
- The funds are still in the receiving account;
- The receiving institution quickly flags the account;
- The scammer has not withdrawn or transferred the funds;
- You have complete transaction details;
- Law enforcement can identify the suspect.
You have a lower chance if:
- The funds were withdrawn in cash;
- The money passed through several mule accounts;
- Crypto was used;
- The scammer used fake IDs or stolen accounts;
- The complaint was filed weeks or months later.
Even if recovery is uncertain, reporting is still important because it creates an official record and may help connect your case with other victims.
Frequently Asked Questions
How do I report an online scam in the Philippines?
Report first to your bank or e-wallet, then file a complaint with PNP-ACG, NBI Cybercrime, or the appropriate police unit. Prepare screenshots, transaction receipts, scammer details, and a written timeline.
Can I freeze the scammer’s bank account myself?
No. A private person cannot directly freeze another person’s account. You can request an urgent fraud hold or account flagging through the bank or e-wallet, and law enforcement or authorized agencies may pursue formal legal processes.
How fast should I report a GCash, Maya, or bank transfer scam?
Immediately. Report as soon as you realize it is a scam. In practice, minutes matter because funds are often transferred or withdrawn quickly.
What law punishes online scammers in the Philippines?
Online scammers may be liable under Article 315 of the Revised Penal Code on estafa, RA 10175 or the Cybercrime Prevention Act, RA 12010 or the Anti-Financial Account Scamming Act, and other laws depending on the facts.
Do screenshots count as evidence?
Yes, screenshots can be useful, especially when supported by original files, links, transaction records, metadata, affidavits, and proper authentication. RA 8792 and the Rules on Electronic Evidence recognize the legal relevance of electronic documents.
Should I go to the barangay first?
Usually no, if the matter is an online scam involving cybercrime, bank accounts, e-wallets, or unknown suspects. Go directly to the bank/e-wallet and cybercrime authorities. Barangay proceedings are more useful for local disputes where the parties are known and live in the same city or municipality.
Can I report a scammer even if I only lost a small amount?
Yes. Small-value scams are still reportable. Many syndicates operate by collecting small amounts from many victims.
What if the scammer used a fake name?
Still report. Provide the account number, mobile number, username, profile link, transaction reference, and screenshots. Investigators and financial institutions may trace records that are not visible to you.
Can a foreigner report an online scam in the Philippines?
Yes. A foreigner may report if the scam involves Philippine accounts, Philippine-based persons, or transactions connected to the Philippines. If abroad, the foreigner may need a notarized, consularized, or apostilled affidavit or SPA for a Philippine representative.
What if the bank or e-wallet refuses to help?
Ask for a written response or complaint reference number. If the institution is supervised by BSP and does not properly address your complaint, escalate through the BSP Consumer Assistance Mechanism.
Key Takeaways
- Report online scams immediately to your bank or e-wallet before the funds move.
- Request urgent account flagging, transaction hold, and preservation of records.
- File a formal complaint with PNP-ACG, NBI Cybercrime, or the proper police unit.
- Preserve screenshots, receipts, links, usernames, numbers, and original files.
- RA 10175, RA 12010, RA 8792, and Article 315 of the Revised Penal Code are commonly relevant.
- Account freezing is not automatic, but fast reporting improves the chance of stopping or tracing funds.
- Victims abroad can still report, but may need an SPA, notarized affidavit, consular acknowledgment, or apostille.